I'd prefer 'sandboxes' at an even lower, function-level, such as with Austral-lang's capabilities: https://news.ycombinator.com/item?id=34168452 https://news.yc

I'd prefer 'sandboxes' at an even lower, function-level, such as with Austral-lang's capabilities: https://news.ycombinator.com/item?id=34168452 https://news.ycombinator.com/item?id=34168452 There you can more exactly specify what a function may do, instead of relying on blunt categories like "filesystem".